hxxp://gta5-87g[.]pages[.]dev

Analysis

user interaction
yes
max time kernel
898s
max time network
733s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://gta5-87g.pages.dev
Sample261022-sebysavv4p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3328	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{88542602-B5B4-4DDC-A9AE-1319304EEC1A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5028	msedge.exe
5028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 980 wrote to memory of 4160	980	msedge.exe	84
PID 980 wrote to memory of 3328	980	msedge.exe	86
PID 980 wrote to memory of 4272	980	msedge.exe	87
PID 980 wrote to memory of 4296	980	msedge.exe	88
PID 980 wrote to memory of 4272	980	msedge.exe	87
PID 980 wrote to memory of 4272	980	msedge.exe	87
PID 980 wrote to memory of 4296	980	msedge.exe	88
PID 980 wrote to memory of 3352	980	msedge.exe	89
PID 980 wrote to memory of 3352	980	msedge.exe	89
PID 980 wrote to memory of 4980	980	msedge.exe	90
PID 980 wrote to memory of 3352	980	msedge.exe	89
PID 980 wrote to memory of 4980	980	msedge.exe	90
PID 980 wrote to memory of 4980	980	msedge.exe	90
PID 980 wrote to memory of 1180	980	msedge.exe	91
PID 980 wrote to memory of 3284	980	msedge.exe	92
PID 980 wrote to memory of 1180	980	msedge.exe	91
PID 980 wrote to memory of 1180	980	msedge.exe	91
PID 980 wrote to memory of 3284	980	msedge.exe	92
PID 980 wrote to memory of 3284	980	msedge.exe	92
PID 980 wrote to memory of 5072	980	msedge.exe	95
PID 980 wrote to memory of 5072	980	msedge.exe	95
PID 980 wrote to memory of 5072	980	msedge.exe	95
PID 980 wrote to memory of 4720	980	msedge.exe	97
PID 980 wrote to memory of 2584	980	msedge.exe	98
PID 980 wrote to memory of 4720	980	msedge.exe	97
PID 980 wrote to memory of 2584	980	msedge.exe	98
PID 980 wrote to memory of 1864	980	msedge.exe	100
PID 980 wrote to memory of 1736	980	msedge.exe	109
PID 980 wrote to memory of 2020	980	msedge.exe	110
PID 980 wrote to memory of 3200	980	msedge.exe	111
PID 980 wrote to memory of 4292	980	msedge.exe	113
PID 980 wrote to memory of 4292	980	msedge.exe	113
PID 980 wrote to memory of 2860	980	msedge.exe	114
PID 980 wrote to memory of 2860	980	msedge.exe	114
PID 980 wrote to memory of 4744	980	msedge.exe	115
PID 980 wrote to memory of 4744	980	msedge.exe	115
PID 980 wrote to memory of 5028	980	msedge.exe	116
PID 980 wrote to memory of 876	980	msedge.exe	117
PID 980 wrote to memory of 876	980	msedge.exe	117
PID 980 wrote to memory of 2820	980	msedge.exe	118
PID 980 wrote to memory of 2820	980	msedge.exe	118
PID 980 wrote to memory of 4624	980	msedge.exe	119
PID 980 wrote to memory of 4624	980	msedge.exe	119
PID 980 wrote to memory of 608	980	msedge.exe	122
PID 980 wrote to memory of 608	980	msedge.exe	122
PID 980 wrote to memory of 1940	980	msedge.exe	123
PID 980 wrote to memory of 1940	980	msedge.exe	123
PID 980 wrote to memory of 4324	980	msedge.exe	124
PID 980 wrote to memory of 4324	980	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://gta5-87g.pages.dev
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffd0022c188,0x7ffd0022c194,0x7ffd0022c1a0
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,1902225281855654334,16124192107024900470,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,14049021716793407637,17619866281782990806,262144 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,16775740040632855131,13328614859897760416,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3400,i,17171502532556510552,15284084368949410249,2097152 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,8503325945042253696,4913924658113994952,2097152 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,277922605400132212,9898284322732032768,2097152 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,1665917606664891971,15183311731428386331,2097152 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:2
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3556,i,16749100971343766482,18046683065038842917,2097152 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,13982708245022248451,9581507183223422993,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,2642726793766279729,4853391460990855882,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,9386887380780009776,1546088498377124003,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,9386887380780009776,1546088498377124003,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3460,i,3659879028050587566,7652428580499389925,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,9485079683438556643,9426521177967984647,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4196,i,8487909189245322759,1099489594740924680,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,17565758569131053756,12541229755700167794,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,920424266980932163,9472556739770264436,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3968,i,13383756372538731178,13679469158327530391,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4196,i,6398188128296908238,11390499903131078450,262144 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,15114925522678662527,4109307740672763273,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,13029194079508403479,13540359561358342090,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3480,i,6044769820201199147,11575750951567269796,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3320,i,13841174835083888693,12107770026534431584,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,7430167004228001886,4711614815738822670,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,18293779549028070786,16404264675515888662,524288 --field-trial-handle=2332,i,14186770552618397666,5243271715873599091,262144 --variations-seed-version --mojo-platform-channel-handle=3312 /prefetch:8
  2⤵
  PID:4324

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

102cf56d-8b84-467e-b9f4-e30bfbb35ac4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\102cf56d-8b84-467e-b9f4-e30bfbb35ac4.tmp
Size 8KB
SHA256 8880fb5c848c10ae34a28e04e0481c7ebea59257ed11356465cb4bf352a91990
MD5 dd4b6f0680ebff2a8383f0514e9a5e5c
SHA1 8cb3c813a8cdf2980b84fbe0e42b7ceb3ea2d673
SHA512 e1728c48171724c0a12f40bfcb24cd85de909b34d8f4e98842c6a1f8952285459f04e25f30306ba9d444f1370b7c0cad18e283e1447097e8cdbd26265c98eb07
SSDEEP 192:dON76wlDAQmiUyZJy4X58gZMOKoAAuveoqss2U6:dON76kA6y4X58EMOzAAB+U6
TLSH
T1B8120832B8A8AC3B4EE2A545F58735039FA95167E7456FC0C5DC2A2C01EF66C130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d3289d0-353c-4872-8b60-7a13724c9fcf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6d3289d0-353c-4872-8b60-7a13724c9fcf.tmp
Size 18KB
SHA256 66b60699a0cd04c26283c35d12e873b9cd9c7a9f27302e7ff9a7ef28e0273763
MD5 5edb2be8aba44d285605991a8fc96b6c
SHA1 a2711738a36b590dac023549c2f43c6649212275
SHA512 25ce2109f7eaacbb449493a32f12f16c368c87230580135819e828e6bb9bea037cb091bd0f87ad29f39bd2f75e9e680589e1fb4ef270d4bf1f2b10446d92d8e0
SSDEEP 384:JQkUSv0sNynvZT3mHX58EMOzAA/+vwQTIs94xhIIlO:r0ltAaHOZ/+v4s947Lg
TLSH
T11C827C32B864AD7B4EF6A545F54B3403EFB89167E6C52FD4C6DC6A2C01CA29C234BD06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

045c5685-92f8-4106-bef4-2fc28555b865.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\045c5685-92f8-4106-bef4-2fc28555b865.tmp
Size 24KB
SHA256 8b6bd6a3a2f6b82ea75765279461b9c12a36a535525b4a92500278b3cebf5c75
MD5 c4382c41990c2d7c63645dcfc591b152
SHA1 747b176a14201b8d1916f99ec3fa5d26c84105c3
SHA512 2a10cca7766d0685610d44732ddf3330e185a7cecbc4e0912036dfabc1d1bc771f2f4d1775748a4f0b3e029d698032e312c2a5b6d17635ecb935ca57a6f4782e
SSDEEP 384:sxZhmn/f0sfQ66s8qMpRiYnazAW8pZS15posJWeT+FmXHb/Xk7m:sJmn/fXQ4Mnc7WeT+F+Hbfz
TLSH
T173B20805A924C83B9FC39D19653DBE33D9EC506222C5CEDA1AECCA1C019D1FDAB4B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0aae1f64-d906-45ea-bc7c-40cb2389ac4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0aae1f64-d906-45ea-bc7c-40cb2389ac4a.tmp
Size 10KB
SHA256 d76905fe640f16c089deec707c3bdd344d9137cd925f99b1d1214438f11560cc
MD5 3f48f60687049f96d09e016be234d1f1
SHA1 32740e2cf6fc4f18f6f07e29d814a0cb5a9eb804
SHA512 2db75f70e888bbbe9bce65ba28bf966a91a33311a5eb95168247b420fb1dc8e00a5debfd2d3b0035fe96004db7e03728544fbbe8bb5b567e963a2522bb414dd6
SSDEEP 192:sxZhRpWn/f0sfGVIdpySHW6+WNh/9XYryrT5qIg5uJ:sxZhmn/f0sfGmVHb/Xpqs
TLSH
T1CF22B7526E38A97B8CCBD20DBA16BF13D6F9507261951E58AAFC861C04E77DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d713ea5-18b8-428d-ac7c-94e2a039e6bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3d713ea5-18b8-428d-ac7c-94e2a039e6bd.tmp
Size 27KB
SHA256 7b7d5a56a9a1f85663a53761b2826d1455aeb48de33449c64043206caa74a651
MD5 ef3d7a263e527828f6e8fd7269c39604
SHA1 fd592f6927217dfa9480d35e2bef31e658dbe07b
SHA512 ad03c5869ff8c463a1b19d845192f4e5a3046991bfe10b9fa3c0ccc9b8a2697ee4bc5d95b701fb84c3deade7e36ac5c3fcd32d3fe25b088bf65bd2f71ed368c8
SSDEEP 768:0By4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TblroR3fR:0By4J/DWvbtBhu1jajiLm0beZfR
TLSH
T130C20B3B644CCA7E4FC00A9DDD5E6FDB3E9802C79A948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6abfe52b-1b9b-45a7-bbd0-a0f77649b192.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6abfe52b-1b9b-45a7-bbd0-a0f77649b192.tmp
Size 10KB
SHA256 e322841079363d844a979c4c2ed7b75f653bb65c5fcbcafac61e3ab8e87cc247
MD5 6abcbd025c0c0d3cd1142ad74d093ed1
SHA1 009729c7444f1fd2a0adf16a1850ee3775f7765a
SHA512 e43f37800672e4a45da35455ba6770d78df1524e86c9b9d0a98652c55a324faa997282cfc91f7a49ce6fa9a25ff479a49423f62de606ded8f1929007defc6e74
SSDEEP 192:sxZhRpWn/f0sf9VIdpySHW6+WNh/9XYrt5T5qIg5EJ:sxZhmn/f0sf9mVHb/XUqm
TLSH
T15B22B8526E38A97B8CCBD20DBA16BF13E6F5507261951E48AAFC861C04E77CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 74bd295758f44909ff75a4c2f218ee65dd5d38f26d15b79997e50da53ef5e252
MD5 df824929d97cbadff04700d8cd3d991a
SHA1 dcc0b8b6b0a88a8a2f9eaf09d43f6f9fdf4a416b
SHA512 69468f64e09955617e99f789ccf811bc3ee6b6a2a35727f6eb4cf98478caca0663df6af8a78960fca7ecd77e5d88c1a3de7d9de99ada3d751f80b47ba2af958d
TLSH
T151E020C949C5C23F510864C7037CA78D8390662B92C06D4D6704C6C4F186954E6D1554
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 d6259f406dc9797d72d47bee1c9750553b95d09063cbb08a5dca774e474e8110
MD5 716cdca5c0beb7a567c8960b6d38e9b0
SHA1 50fc520ebc490b38b84ba3c2b6c1cdfd48e9a586
SHA512 79a90848a762194456e41a1b56fdef9f9adde4f92048dcc07ca6303abdfa413c94083e2266302939b35a7d465961c47b3c6e0b3ae0461d33d709edd35c14ba5c
TLSH
T161E020C815CDC37D5244748B42AC775C8780762BA3C4A90D5B00C645F0455406397750
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 10914a11ae55c9d06ed29dcb63b9bd34f8256eecc7aa4b3f55e19780d66284af
MD5 dc8306c5c9b1c13c26e3715eb6485da8
SHA1 92158071dd376f87605dc1df3d99df007325c808
SHA512 3e3d3d348091781bf2054c30fe24c26ce5323afa8770a153593d978ff018e9e45c8de43ebc6fdc2eff69aa45b40cbc145fb7367eab257ea14187ff968c5bd0bc
TLSH
T145E026A805CAC33EA20CB887027C530EC3C4361FD2C26D5E2B08CA85F045C40A792694
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 fac2cc6e5b5b5382a6067f6fe5da5663f5bcb7c6cc806a15875de59e0c9d45b6
MD5 fa9216e90b269241050a8024b4fc9b90
SHA1 8e1f88b3e3f09af5e7cc514a340281d282bac46b
SHA512 179e5340413f580146fbe66174e160fe08173b71c55012e7d50eaa76fb10d1f52e20ed2708767b930dd832ebade6fa24cb8c1f203fb61cb80654d12865467749
TLSH
T1B1E0208888C5C33DD5446487129C630DC781761FF3D0A94D2714C78AF00948062C1561
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 bda2fab2f33ee2805ff1447c378d9d7d93c4283689d677d9918103276e4ee7ee
MD5 f3187460556950e9f98f1b908a06a5c0
SHA1 72d7d5f264739bde6c8983ae38405017bafb6df6
SHA512 bac638a66ec7ab101bafd43f7153b1b4e5ad66e6076f393cd245bb851288c499c8bdd1a122768dae84854aa89328d0e85f511a6a2c3dbed017ccaf20649a8bbc
TLSH
T152E0268804CAC23EE20CA487016C538FD381E62FD2C06A0F1708CF85F085858E6E2B95
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 1a575f6c7ecc52f44db0880a75159c20e297c1c9009964ac1c7596ec64d86868
MD5 767978e0d00231d7ba7743e6ae1b2678
SHA1 8b256bbae2213c333842d5e2c6f2ea96dc56f2aa
SHA512 115283286c3d3234ef834e1175330149b598805a4ad12702449bdd956a43fc8e3b3b454583aeddfb4aa37353d4b0169f98d95746c895b7954b26873693f7cf57
TLSH
T10A611A89CBA0407FFB8AA07082DD208732FD419E57AFDF6A12F8ECBA5F4A7257044110
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 10cb6befc37f4fd7077c2c6a4b4956b6455d04d9ba7c8714556e14d272a48082
MD5 e496a750e3ff4c25a4ff72dcc29fab32
SHA1 1e0abcd66d098821a0aa7318f5cfb8c8bdec7e57
SHA512 18dacc43d222166e6abfe8cf8eefda586ebe0d782aac936c8111a8caf9eb8372956557b14a8d6f41b6a6ae001cff980790c0f949779016c682d696ed14282ac4
TLSH
T15D61FB89DBA0407BFB8A607095DC108736FD448E57AFDF5A12F8ECB95F0A3617044114
MD5 SHA1 SHA512 TLSH

Submit Download

b86eed53-81b8-4f0b-af3a-dd71175968c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b86eed53-81b8-4f0b-af3a-dd71175968c5.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

22a5259e-86ce-426a-b94f-f0907520b199.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\22a5259e-86ce-426a-b94f-f0907520b199.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

7d780f1a-c27f-4014-b20f-2659725aa6e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7d780f1a-c27f-4014-b20f-2659725aa6e9.tmp
Size 1KB
SHA256 0d8068c48474672a8ee44262c4be8ede6273d9665b457edc66aad1aafa92f3ef
MD5 be883cfef92c8fb9c1c5d59163ea396d
SHA1 53a75e9bc4d4fe2d21210d47b3af2779d58e9efc
SHA512 5cb8eaf3933c1bc5a39ca1b5b2d27983c29736a9db9b945dcc98ae2557634949592e7f9980bfe39fa93a0f9439339044a733a14de77266c39ee5a1b0b5f742e9
TLSH
T13B2199F683E186AEC91166F0A918AE2BDE1D0505831C3C5996D4FF57D7E3072E102A6B
MD5 SHA1 SHA512 TLSH

Submit Download

bd9c62a4-a225-41de-84a9-25d134826a40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bd9c62a4-a225-41de-84a9-25d134826a40.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fd5194ae-3728-4191-a2b5-4e330b1f33c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fd5194ae-3728-4191-a2b5-4e330b1f33c0.tmp
Size 1KB
SHA256 5913a148f3d98c8d4b92f07be91c23e1b142845ebf91f174126dbf2759ac201f
MD5 e3cb52b70c4e8f84f2c913e44d591f9c
SHA1 7c176b602537375f01be798af094cd5ae51d6b1d
SHA512 0fa0aa853f66a025048b381760d5d365a3def61c66d5892c3eb5f6faac36dfb587593841bd215a9d8b59bea6215ebdf92851b2594828ea8a28f075aaca6f8fbe
TLSH
T16621AAF3C7E585AE890256F06A24AE2BDE1E090543283C09C6D8EF6BD7E2471E10265F
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a04fe76-5d9c-461d-91b5-7b417a4287d6\index-dir\temp-index
Size 768B
SHA256 1b4cbac4db45c2491d5b5c851d71418e28850a971872a9434ef2830be9cda7a1
MD5 c2ba1961372f34a3d0bc831668b0095f
SHA1 bdb4b8ba564cb9340a6db99ce23df1e5a7da37de
SHA512 4d413b929c27453a822c236ef1511203a6334ef51f8a43c258d31bc661c42ca78da85d889c5c57cba9d56a336c4e33c0d7188b84c22978d5477b5a0461e53a95
TLSH
T15A014BCA0D039F8AFC410230603CB809AAB902DC0380BA4FB2FEC0268C673107E46AA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1a04fe76-5d9c-461d-91b5-7b417a4287d6\index-dir\the-real-index
Size 768B
SHA256 047e5cc6b7f10bede0e84baf7e58ef4887364af4314635c21fe8d07e16d10306
MD5 664c7392f9d870c4b0628b0f70fe2309
SHA1 37f79c1c23db9ca6cc255666f5e6d1ac98551463
SHA512 ca88fa702b438a11348395fd0574b5b3f3a74b945a910a625821c038ffd7c70d1c83a026f29249bc113f4ce72c5bb5b7d8fdfc87b874bc8f1e65a1e20b4a28d5
TLSH
T1030120D640034B42FC0003709A3CA816216A41489390774FA3EBA426DC53780BD83EF4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 e818c51f7325a115aa40d389d3d1153b039f6eb11118937a0d63be9dc6fff7b7
MD5 d40ff0d1fec2fd31b3d57527a339d09f
SHA1 f7ff82e39ed50afecad7f769d504ad4cc22eba2d
SHA512 4f323bbf420ede9548c789ce9e617faf1f3a8cee248aff3f9959b53371d97eb2549191d599c7df84be7d5b723dd2c1aece84f28abdbe553fd408f91899fa551b
TLSH
T177E0D8B63EF71860E8EFE3D5547594E044057914C984EDCF541661CB22A13653856C36
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 294a1e0028df0427bd0f002ec5c41bfdcdbd00718960310724c94f5753ca39e9
MD5 444939b6d1540ee9acd74015522b95cf
SHA1 bfa7f8427f20615490e477d856ee609172af7332
SHA512 604f78246fd92c7e2c44a87fe56ae58fe6df4b4fcd63dfaf21406c832361f80f82a3962577056f0931da396c04d3181973a9a644c83d21c8cb34ab8eafd4b24a
SSDEEP 48:KIDI1Ks04jyL2xMwuUUNb4PgISINK9s1uNxmdYHY02yLdcRtfLPwbD2jISlwK9lh:KIDCKs0+WheKiwKaq0KziH0
TLSH
T18191304435BF021539BD2A8881B58B5F124236B73158E53B7FBD40A29E2FE045DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a5fe5535-626d-4e45-87c8-35a70bfb7b64.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a5fe5535-626d-4e45-87c8-35a70bfb7b64.tmp
Size 9KB
SHA256 dce2e9c9a6af013a30dd533512e00b0eb00c0515e0279bc06d624b008cd85bfa
MD5 b5f9722aecedaf3f1e1423e03406eb30
SHA1 1c59bced371701df6b47da403f0c92babb3f6a0a
SHA512 e7a194f75b1227139f17bc2d9bb7dc9b72a1e0fbba43429b42a072c9a84980f295f8e11acc4e9182634d5fa5ac5760b67d35501871847edfd734b72bc75fb6c2
SSDEEP 192:sxZhRpWn/f0syGVIdpySHW6+WNhMS/Yr1rT5qIgrJ:sxZhmn/f0syGmVHbD/sq9
TLSH
T11A22A7526E38A97B8CCBD20DBB16BF13D6F9507261951E48AAFC861C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

accf145d-2546-4c5e-99bf-0f3cf5e1e33c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\accf145d-2546-4c5e-99bf-0f3cf5e1e33c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b13d28aa-ac5f-4b78-bc11-b969a9ab3628.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b13d28aa-ac5f-4b78-bc11-b969a9ab3628.tmp
Size 10KB
SHA256 13979fd6b151da4e27f22b8bdcb527ba4a4149b30eeec4ea3784208ae80c18e1
MD5 9286476da1fad88ac7d50d7535fa12db
SHA1 22a140111a88cc12eae06b2c84bdcafbb3de5cf8
SHA512 8fbbc917e890ae1b3d2e0c39c22915abda69cefa7cd3a79f24dd19f7c882347f004771f3448bda4220fd36a24ed93e7e12840cc3343af48d93272b257d2390c9
SSDEEP 192:sxZhRpWn/f0sf9VIdpUSHW6+WNh/9XYryuT5qIg5EJ:sxZhmn/f0sf9mXHb/Xkqm
TLSH
T1A822B7526E38A97B8CCBD20DFA16BF13E6F5507261911E48AAFC861C05E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0edecff-d80c-4828-b381-fe8655b69c0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\c0edecff-d80c-4828-b381-fe8655b69c0a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bba581ec-9784-4139-95c2-743be7f657e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bba581ec-9784-4139-95c2-743be7f657e8.tmp
Size 18KB
SHA256 26f382fda2f1aceece40f42b58a58a5f447ebc13b7279d6e07be61671f4ca55d
MD5 b3756480ae845bca99015df588b1008b
SHA1 ceeb639e68f9b4a4977d701f9584295d99bb03dd
SHA512 d5d41464918cfb390613fda94b7b78ec053b0fb29a33397bd37009a2e1ad2433f1f5ec183ff2e8e08f1cbe2213a68c0878566590c5fab07aee322a852fbb83e4
SSDEEP 384:UQkUSv0sNy6vZT3mHX58EMOzAA/+vwQTIs94xhIIlO:E04tAaHOZ/+v4s947Lg
TLSH
T1A9827C32B864AC7B4EF6A545F54B3403DFB89167E6C52FD4C6DC6A2C01CA29C234BD06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dbb507a7-71b5-4ede-9809-d5247151cb88.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dbb507a7-71b5-4ede-9809-d5247151cb88.tmp
Size 8KB
SHA256 dc0fc77f032603a8bef0700a515a57b238e3105786c73bd914e9205279a6a018
MD5 8a65267465b04a12fd8e5fa7b9c76f71
SHA1 9b595a4772a661273ecf361dc846eca7258f5a95
SHA512 e10e86c64d6664c26c7bc826e67b6b11a42f0f921bb7a7f144c7deb511898e58107a3f94885bfc2e935d138647349b8881b71d121e1ebec753ae4745cbb65e99
SSDEEP 192:1ONf6wlDgQmiUyDJW4X58gZMOKoAaDleqnU6:1ONf6kgaW4X58EMOzAqZU6
TLSH
T19C02E835A9686C7B8EF2AE09F58B27139FE4106BE5512F84DAEC1A2D00D765C1307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea2e7049-2d83-460a-aa1b-d03cf023aadd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ea2e7049-2d83-460a-aa1b-d03cf023aadd.tmp
Size 26KB
SHA256 9f61583eb4a0d4bafc6fafc16b00ede33204458cee715c5f693760c4e28ed12d
MD5 6a8adc446ce5fa064fd34e8c9a82fc92
SHA1 3c412aed1a5857bbde407f1c5208c12d33898259
SHA512 4375fe6d28273692ed870ad90707c6882f537413eec9e7462c756763a7dc140e1f040463dde3605a5e2abae25d0be8b00b833f417d4a0885ad4152a05b392e97
SSDEEP 384:aiFzQkUSvDzsNK8TUNTUlIlnvZTwmHX58EMOzAAk+vwQTIs94xhIIlO:RFdHHwgN+AaHOZk+v4s947Lg
TLSH
T1A5C2F7F258D7993ADDAE9747A73E2C029EBCC067B5855A90B388551CCC862BFD30B901
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

201560f5-27a7-49cf-b030-449d35181ddb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\201560f5-27a7-49cf-b030-449d35181ddb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e105872d023e0717875dbea201eb14b8737cf02791f9495219b465e47d3ba77d
MD5 9f094cc365cd7b5212653528eca1fe73
SHA1 09cbfb0db4591889b3886abba18f6a67eaefc396
SHA512 4eb616928f600c14949d8b980829daaeabb1d31ab2a9f1b0ac3a1af49b39a1dfae0c82ac32683f4f8936e7b2966034f68ffcb95d1c6a491c6456d217fdb896a9
TLSH
T1D4413A58A6E91148B3B3BE5A9BF3696D987ABC332E06D45D10110E4F0623B41DC71B37
MD5 SHA1 SHA512 TLSH

Submit Download